Book Image

Docker on Amazon Web Services

By : Justin Menga
Book Image

Docker on Amazon Web Services

By: Justin Menga

Overview of this book

Over the last few years, Docker has been the gold standard for building and distributing container applications. Amazon Web Services (AWS) is a leader in public cloud computing, and was the first to offer a managed container platform in the form of the Elastic Container Service (ECS). Docker on Amazon Web Services starts with the basics of containers, Docker, and AWS, before teaching you how to install Docker on your local machine and establish access to your AWS account. You'll then dig deeper into the ECS, a native container management platform provided by AWS that simplifies management and operation of your Docker clusters and applications for no additional cost. Once you have got to grips with the basics, you'll solve key operational challenges, including secrets management and auto-scaling your infrastructure and applications. You'll explore alternative strategies for deploying and running your Docker applications on AWS, including Fargate and ECS Service Discovery, Elastic Beanstalk, Docker Swarm and Elastic Kubernetes Service (EKS). In addition to this, there will be a strong focus on adopting an Infrastructure as Code (IaC) approach using AWS CloudFormation. By the end of this book, you'll not only understand how to run Docker on AWS, but also be able to build real-world, secure, and scalable container platforms in the cloud.
Table of Contents (26 chapters)
Title Page
Copyright and Credits
Dedication
Packt Upsell
Contributors
Preface
Index

Pulling Docker images from ECR


Now that you have learned how to publish Docker images to ECR, let's focus on how Docker clients running under a variety of scenarios can pull your Docker images from ECR. Recall from the introduction to ECR at the beginning of this chapter that a variety of scenarios exist for client access to ECR, and we will now focus on these scenarios in the context of ECS container instances as your Docker clients:

  • ECS container instances running in the same account as your ECR repositories
  • ECS container instances running in different accounts to your ECR repositories
  • AWS services that require access to your ECR repositories

ECS container instance access to ECR from the same account

When your ECS container instances are running in the same account as your ECR repositories, the recommended method to enable the ECS agents running inside your ECS container instances to pull Docker images from ECR is to use IAM policies associated with the IAM instance role applied to EC2 instance...